GeneralInformation

Hostnames	218.209.78.34.bc.googleusercontent.com
Domains	googleusercontent.com
Cloud Provider	Google
Cloud Region	europe-west1
Country	Belgium
City	Brussels
Organization	Google LLC
ISP	Google LLC
ASN	AS396982
Operating System	Ubuntu

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2019(1)

CVE-2019-11072

9.8lighttpd before 1.4.54 has a signed integer overflow, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malicious HTTP GET request, as demonstrated by mishandling of /%2F? in burl_normalize_2F_to_slash_fix in burl.c. NOTE: The developer states "The feature which can be abused to cause the crash is a new feature in lighttpd 1.4.50, and is not enabled by default. It must be explicitly configured in the config file (e.g. lighttpd.conf). Certain input will trigger an abort() in lighttpd when that feature is enabled. lighttpd detects the underflow or realloc() will fail (in both 32-bit and 64-bit executables), also detected in lighttpd. Either triggers an explicit abort() by lighttpd. This is not exploitable beyond triggering the explicit abort() with subsequent application exit.

2018(1)

CVE-2018-19052

7.5An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific mod_alias configuration where the matched alias lacks a trailing '/' character, but the alias target filesystem path does have a trailing '/' character.

OpenPorts

22 53 80 3389 8000

22 / tcp

2125189661 | 2025-03-25T19:13:29.145497

SSH-2.0-OpenSSH_7.6p1 Ubuntu-4ubuntu0.6
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQC726cA8dPYGwRTo5zyLwRaPNnFEen/L95LzKvvjKqMzQSM
uhuuGXUoFvVJDvqiPWAYdZLplZXG+SYT9cIV6/KelvIoEZSRzJ0Dp/Hz4MfyoLjmF2F+F3UZhaNd
OLjDmeVqQ4e9UObPi+fCxLJTZhpaseoNRduLDMBM6F14XbNJdgI4By9GTnpTXYRTVWuJ6cEQVKI6
dAx3skxXUkDRF9D4GF3W9s8YCUuifsdmUjCbX/o8Cw2l6SSUCSZzo4+ZJovFnjLKnSLRjG1h7CAJ
DJIg4XLtDd5TM+Xhh3UQp6WH+4dCpEaWRcZ3UIJVyqZPK7bqrjkg91ATbqFDkRQ8sEsL
Fingerprint: 41:c9:cb:24:84:ce:15:31:2d:96:f4:12:48:1c:d8:62

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

53 / udp

520750043 | 2025-03-05T04:13:48.532423

dnsmasq-pi-hole-2.81
Recursion: enabled

80 / tcp

-785505157 | 2025-03-15T02:43:31.316058

Hashes

hash

438283440

http.dom_hash

867536793

http.html_hash

-785505157

http.server_hash

1732832046

http.title_hash

2092944681

Welcome page

HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Type: text/html; charset=utf-8
Accept-Ranges: bytes
ETag: "2643465730"
Last-Modified: Tue, 16 Nov 2021 06:15:39 GMT
Expires: Sat, 15 Mar 2025 02:43:30 GMT
Cache-Control: max-age=0
Content-Length: 3361
Date: Sat, 15 Mar 2025 02:43:30 GMT
Server: lighttpd/1.4.45

Vulnerabilities

1 1

3389 / tcp

1107662018 | 2025-03-17T21:11:58.993384

Remote Desktop Protocol
\x03\x00\x00\x13\x0e\xd0\x00\x00\x124\x00\x02\x01\x08\x00\x01\x00\x00\x00

8000 / tcp

-1484181850 | 2025-03-17T21:28:50.858774

Hashes

hash

-316926582

http.dom_hash

-231280277

http.html_hash

-1484181850

http.server_hash

-225123307

http.title_hash

HTTP/1.1 200 OK
Date: Mon, 17 Mar 2025 21:28:50 GMT
Expires: Thu, 26 Oct 1978 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Content-Length: 13455
Vary: Cookie
Connection: Keep-Alive
Set-Cookie: cval=1756631194; Path=/en-US/account/
X-UA-Compatible: IE=edge
Set-Cookie: splunkweb_uid=F6F28923-E3F5-4686-B017-C6858BBF7552; Path=/en-US/account; Max-Age=157680000; Expires=Sat, 16 Mar 2030 21:28:50 GMT
X-Frame-Options: SAMEORIGIN
Server: Splunkd

34.78.209.218

Last Seen: 2025-03-25

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

22 / tcp

2125189661 | 2025-03-25T19:13:29.145497

OpenSSH7.6p1 Ubuntu 4ubuntu0.6

53 / udp

520750043 | 2025-03-05T04:13:48.532423

80 / tcp

-785505157 | 2025-03-15T02:43:31.316058

Hashes

lighttpd1.4.45

3389 / tcp

1107662018 | 2025-03-17T21:11:58.993384

Remote Desktop Protocol

8000 / tcp

-1484181850 | 2025-03-17T21:28:50.858774

Hashes

Products

Pricing

Contact Us

34.78.209.218

Last Seen: 2025-03-25

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Latest CVSS

OpenPorts

22 / tcp 2125189661 | 2025-03-25T19:13:29.145497

OpenSSH7.6p1 Ubuntu 4ubuntu0.6

53 / udp 520750043 | 2025-03-05T04:13:48.532423

80 / tcp -785505157 | 2025-03-15T02:43:31.316058

Hashes

lighttpd1.4.45

3389 / tcp 1107662018 | 2025-03-17T21:11:58.993384

Remote Desktop Protocol

8000 / tcp -1484181850 | 2025-03-17T21:28:50.858774

Hashes

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

2125189661 | 2025-03-25T19:13:29.145497

53 / udp

520750043 | 2025-03-05T04:13:48.532423

80 / tcp

-785505157 | 2025-03-15T02:43:31.316058

3389 / tcp

1107662018 | 2025-03-17T21:11:58.993384

8000 / tcp

-1484181850 | 2025-03-17T21:28:50.858774